Security GRC Analyst

• New Position to assist client with the execution of its responsibilities under the statewide information security program

• 10+ Years of Experience in Information Security and Compliance.
• 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
• Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
• Prior Experience POA&M or CAP.
• Strong Communication Experience.
• Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)
• Bachelor’s Degree - field of study is open, but the degree must be complete and verifiable

Preferred Skills:

• Have completed an information security plan or system security plan notebook.
• Simultaneously, manage multiple infosec work efforts.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.
• Government sector experience
• CISA, GSLC, or equivalent certification